pulumi-github 6.11.0a1768542226__py3-none-any.whl → 6.12.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_github/__init__.py +37 -0
- pulumi_github/_inputs.py +527 -34
- pulumi_github/actions_environment_secret.py +141 -12
- pulumi_github/actions_environment_variable.py +73 -39
- pulumi_github/actions_organization_permissions.py +50 -3
- pulumi_github/actions_organization_secret.py +164 -55
- pulumi_github/actions_organization_secret_repositories.py +44 -28
- pulumi_github/actions_organization_secret_repository.py +44 -28
- pulumi_github/actions_organization_variable.py +44 -47
- pulumi_github/actions_organization_variable_repositories.py +262 -0
- pulumi_github/actions_organization_variable_repository.py +262 -0
- pulumi_github/actions_organization_workflow_permissions.py +320 -0
- pulumi_github/actions_repository_permissions.py +50 -3
- pulumi_github/actions_secret.py +176 -41
- pulumi_github/actions_variable.py +65 -33
- pulumi_github/app_installation_repositories.py +6 -6
- pulumi_github/app_installation_repository.py +6 -6
- pulumi_github/dependabot_organization_secret.py +128 -59
- pulumi_github/dependabot_organization_secret_repositories.py +44 -36
- pulumi_github/dependabot_organization_secret_repository.py +262 -0
- pulumi_github/dependabot_secret.py +154 -41
- pulumi_github/emu_group_mapping.py +62 -6
- pulumi_github/get_ip_ranges.py +3 -0
- pulumi_github/get_release_asset.py +370 -0
- pulumi_github/get_repository.py +17 -2
- pulumi_github/get_team.py +29 -13
- pulumi_github/organization_ruleset.py +11 -17
- pulumi_github/outputs.py +404 -25
- pulumi_github/pulumi-plugin.json +1 -1
- pulumi_github/repository.py +88 -23
- pulumi_github/repository_custom_property.py +2 -2
- pulumi_github/repository_environment.py +11 -11
- pulumi_github/repository_environment_deployment_policy.py +4 -4
- pulumi_github/repository_ruleset.py +7 -7
- pulumi_github/team.py +70 -21
- {pulumi_github-6.11.0a1768542226.dist-info → pulumi_github-6.12.0.dist-info}/METADATA +1 -1
- {pulumi_github-6.11.0a1768542226.dist-info → pulumi_github-6.12.0.dist-info}/RECORD +39 -34
- {pulumi_github-6.11.0a1768542226.dist-info → pulumi_github-6.12.0.dist-info}/WHEEL +1 -1
- {pulumi_github-6.11.0a1768542226.dist-info → pulumi_github-6.12.0.dist-info}/top_level.txt +0 -0
|
@@ -23,25 +23,37 @@ class ActionsOrganizationSecretArgs:
|
|
|
23
23
|
visibility: pulumi.Input[_builtins.str],
|
|
24
24
|
destroy_on_drift: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
25
25
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
27
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
28
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None):
|
|
28
29
|
"""
|
|
29
30
|
The set of arguments for constructing a ActionsOrganizationSecret resource.
|
|
30
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
31
|
-
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret
|
|
32
|
-
|
|
31
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret.
|
|
32
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
33
|
+
:param pulumi.Input[_builtins.bool] destroy_on_drift: (Optional) This is ignored as drift detection is built into the resource.
|
|
34
|
+
|
|
35
|
+
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
33
36
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
34
|
-
:param pulumi.Input[_builtins.str]
|
|
35
|
-
:param pulumi.Input[
|
|
37
|
+
:param pulumi.Input[_builtins.str] key_id: ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
38
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted.
|
|
39
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
36
40
|
"""
|
|
37
41
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
38
42
|
pulumi.set(__self__, "visibility", visibility)
|
|
43
|
+
if destroy_on_drift is not None:
|
|
44
|
+
warnings.warn("""This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""", DeprecationWarning)
|
|
45
|
+
pulumi.log.warn("""destroy_on_drift is deprecated: This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""")
|
|
39
46
|
if destroy_on_drift is not None:
|
|
40
47
|
pulumi.set(__self__, "destroy_on_drift", destroy_on_drift)
|
|
41
48
|
if encrypted_value is not None:
|
|
42
49
|
pulumi.set(__self__, "encrypted_value", encrypted_value)
|
|
50
|
+
if key_id is not None:
|
|
51
|
+
pulumi.set(__self__, "key_id", key_id)
|
|
43
52
|
if plaintext_value is not None:
|
|
44
53
|
pulumi.set(__self__, "plaintext_value", plaintext_value)
|
|
54
|
+
if selected_repository_ids is not None:
|
|
55
|
+
warnings.warn("""This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""", DeprecationWarning)
|
|
56
|
+
pulumi.log.warn("""selected_repository_ids is deprecated: This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
45
57
|
if selected_repository_ids is not None:
|
|
46
58
|
pulumi.set(__self__, "selected_repository_ids", selected_repository_ids)
|
|
47
59
|
|
|
@@ -49,7 +61,7 @@ class ActionsOrganizationSecretArgs:
|
|
|
49
61
|
@pulumi.getter(name="secretName")
|
|
50
62
|
def secret_name(self) -> pulumi.Input[_builtins.str]:
|
|
51
63
|
"""
|
|
52
|
-
Name of the secret
|
|
64
|
+
Name of the secret.
|
|
53
65
|
"""
|
|
54
66
|
return pulumi.get(self, "secret_name")
|
|
55
67
|
|
|
@@ -61,8 +73,7 @@ class ActionsOrganizationSecretArgs:
|
|
|
61
73
|
@pulumi.getter
|
|
62
74
|
def visibility(self) -> pulumi.Input[_builtins.str]:
|
|
63
75
|
"""
|
|
64
|
-
Configures the access that repositories have to the organization secret
|
|
65
|
-
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
76
|
+
Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
66
77
|
"""
|
|
67
78
|
return pulumi.get(self, "visibility")
|
|
68
79
|
|
|
@@ -72,7 +83,13 @@ class ActionsOrganizationSecretArgs:
|
|
|
72
83
|
|
|
73
84
|
@_builtins.property
|
|
74
85
|
@pulumi.getter(name="destroyOnDrift")
|
|
86
|
+
@_utilities.deprecated("""This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""")
|
|
75
87
|
def destroy_on_drift(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
88
|
+
"""
|
|
89
|
+
(Optional) This is ignored as drift detection is built into the resource.
|
|
90
|
+
|
|
91
|
+
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
92
|
+
"""
|
|
76
93
|
return pulumi.get(self, "destroy_on_drift")
|
|
77
94
|
|
|
78
95
|
@destroy_on_drift.setter
|
|
@@ -91,11 +108,23 @@ class ActionsOrganizationSecretArgs:
|
|
|
91
108
|
def encrypted_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
92
109
|
pulumi.set(self, "encrypted_value", value)
|
|
93
110
|
|
|
111
|
+
@_builtins.property
|
|
112
|
+
@pulumi.getter(name="keyId")
|
|
113
|
+
def key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
114
|
+
"""
|
|
115
|
+
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
116
|
+
"""
|
|
117
|
+
return pulumi.get(self, "key_id")
|
|
118
|
+
|
|
119
|
+
@key_id.setter
|
|
120
|
+
def key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
121
|
+
pulumi.set(self, "key_id", value)
|
|
122
|
+
|
|
94
123
|
@_builtins.property
|
|
95
124
|
@pulumi.getter(name="plaintextValue")
|
|
96
125
|
def plaintext_value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
97
126
|
"""
|
|
98
|
-
Plaintext value of the secret to be encrypted
|
|
127
|
+
Plaintext value of the secret to be encrypted.
|
|
99
128
|
"""
|
|
100
129
|
return pulumi.get(self, "plaintext_value")
|
|
101
130
|
|
|
@@ -105,9 +134,10 @@ class ActionsOrganizationSecretArgs:
|
|
|
105
134
|
|
|
106
135
|
@_builtins.property
|
|
107
136
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
137
|
+
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
108
138
|
def selected_repository_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]]:
|
|
109
139
|
"""
|
|
110
|
-
An array of repository
|
|
140
|
+
An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
111
141
|
"""
|
|
112
142
|
return pulumi.get(self, "selected_repository_ids")
|
|
113
143
|
|
|
@@ -122,32 +152,48 @@ class _ActionsOrganizationSecretState:
|
|
|
122
152
|
created_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
123
153
|
destroy_on_drift: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
124
154
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
155
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
125
156
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
157
|
+
remote_updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
126
158
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
127
159
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
128
160
|
updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
129
161
|
visibility: Optional[pulumi.Input[_builtins.str]] = None):
|
|
130
162
|
"""
|
|
131
163
|
Input properties used for looking up and filtering ActionsOrganizationSecret resources.
|
|
132
|
-
:param pulumi.Input[_builtins.str] created_at: Date
|
|
164
|
+
:param pulumi.Input[_builtins.str] created_at: Date the secret was created.
|
|
165
|
+
:param pulumi.Input[_builtins.bool] destroy_on_drift: (Optional) This is ignored as drift detection is built into the resource.
|
|
166
|
+
|
|
167
|
+
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
133
168
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
134
|
-
:param pulumi.Input[_builtins.str]
|
|
135
|
-
:param pulumi.Input[_builtins.str]
|
|
136
|
-
:param pulumi.Input[
|
|
137
|
-
:param pulumi.Input[_builtins.str]
|
|
138
|
-
:param pulumi.Input[_builtins.
|
|
139
|
-
|
|
169
|
+
:param pulumi.Input[_builtins.str] key_id: ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
170
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted.
|
|
171
|
+
:param pulumi.Input[_builtins.str] remote_updated_at: Date the secret was last updated in GitHub.
|
|
172
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret.
|
|
173
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
174
|
+
:param pulumi.Input[_builtins.str] updated_at: Date the secret was last updated by the provider.
|
|
175
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
140
176
|
"""
|
|
141
177
|
if created_at is not None:
|
|
142
178
|
pulumi.set(__self__, "created_at", created_at)
|
|
179
|
+
if destroy_on_drift is not None:
|
|
180
|
+
warnings.warn("""This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""", DeprecationWarning)
|
|
181
|
+
pulumi.log.warn("""destroy_on_drift is deprecated: This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""")
|
|
143
182
|
if destroy_on_drift is not None:
|
|
144
183
|
pulumi.set(__self__, "destroy_on_drift", destroy_on_drift)
|
|
145
184
|
if encrypted_value is not None:
|
|
146
185
|
pulumi.set(__self__, "encrypted_value", encrypted_value)
|
|
186
|
+
if key_id is not None:
|
|
187
|
+
pulumi.set(__self__, "key_id", key_id)
|
|
147
188
|
if plaintext_value is not None:
|
|
148
189
|
pulumi.set(__self__, "plaintext_value", plaintext_value)
|
|
190
|
+
if remote_updated_at is not None:
|
|
191
|
+
pulumi.set(__self__, "remote_updated_at", remote_updated_at)
|
|
149
192
|
if secret_name is not None:
|
|
150
193
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
194
|
+
if selected_repository_ids is not None:
|
|
195
|
+
warnings.warn("""This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""", DeprecationWarning)
|
|
196
|
+
pulumi.log.warn("""selected_repository_ids is deprecated: This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
151
197
|
if selected_repository_ids is not None:
|
|
152
198
|
pulumi.set(__self__, "selected_repository_ids", selected_repository_ids)
|
|
153
199
|
if updated_at is not None:
|
|
@@ -159,7 +205,7 @@ class _ActionsOrganizationSecretState:
|
|
|
159
205
|
@pulumi.getter(name="createdAt")
|
|
160
206
|
def created_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
161
207
|
"""
|
|
162
|
-
Date
|
|
208
|
+
Date the secret was created.
|
|
163
209
|
"""
|
|
164
210
|
return pulumi.get(self, "created_at")
|
|
165
211
|
|
|
@@ -169,7 +215,13 @@ class _ActionsOrganizationSecretState:
|
|
|
169
215
|
|
|
170
216
|
@_builtins.property
|
|
171
217
|
@pulumi.getter(name="destroyOnDrift")
|
|
218
|
+
@_utilities.deprecated("""This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""")
|
|
172
219
|
def destroy_on_drift(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
220
|
+
"""
|
|
221
|
+
(Optional) This is ignored as drift detection is built into the resource.
|
|
222
|
+
|
|
223
|
+
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
224
|
+
"""
|
|
173
225
|
return pulumi.get(self, "destroy_on_drift")
|
|
174
226
|
|
|
175
227
|
@destroy_on_drift.setter
|
|
@@ -188,11 +240,23 @@ class _ActionsOrganizationSecretState:
|
|
|
188
240
|
def encrypted_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
189
241
|
pulumi.set(self, "encrypted_value", value)
|
|
190
242
|
|
|
243
|
+
@_builtins.property
|
|
244
|
+
@pulumi.getter(name="keyId")
|
|
245
|
+
def key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
246
|
+
"""
|
|
247
|
+
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
248
|
+
"""
|
|
249
|
+
return pulumi.get(self, "key_id")
|
|
250
|
+
|
|
251
|
+
@key_id.setter
|
|
252
|
+
def key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
253
|
+
pulumi.set(self, "key_id", value)
|
|
254
|
+
|
|
191
255
|
@_builtins.property
|
|
192
256
|
@pulumi.getter(name="plaintextValue")
|
|
193
257
|
def plaintext_value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
194
258
|
"""
|
|
195
|
-
Plaintext value of the secret to be encrypted
|
|
259
|
+
Plaintext value of the secret to be encrypted.
|
|
196
260
|
"""
|
|
197
261
|
return pulumi.get(self, "plaintext_value")
|
|
198
262
|
|
|
@@ -200,11 +264,23 @@ class _ActionsOrganizationSecretState:
|
|
|
200
264
|
def plaintext_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
201
265
|
pulumi.set(self, "plaintext_value", value)
|
|
202
266
|
|
|
267
|
+
@_builtins.property
|
|
268
|
+
@pulumi.getter(name="remoteUpdatedAt")
|
|
269
|
+
def remote_updated_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
270
|
+
"""
|
|
271
|
+
Date the secret was last updated in GitHub.
|
|
272
|
+
"""
|
|
273
|
+
return pulumi.get(self, "remote_updated_at")
|
|
274
|
+
|
|
275
|
+
@remote_updated_at.setter
|
|
276
|
+
def remote_updated_at(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
277
|
+
pulumi.set(self, "remote_updated_at", value)
|
|
278
|
+
|
|
203
279
|
@_builtins.property
|
|
204
280
|
@pulumi.getter(name="secretName")
|
|
205
281
|
def secret_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
206
282
|
"""
|
|
207
|
-
Name of the secret
|
|
283
|
+
Name of the secret.
|
|
208
284
|
"""
|
|
209
285
|
return pulumi.get(self, "secret_name")
|
|
210
286
|
|
|
@@ -214,9 +290,10 @@ class _ActionsOrganizationSecretState:
|
|
|
214
290
|
|
|
215
291
|
@_builtins.property
|
|
216
292
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
293
|
+
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
217
294
|
def selected_repository_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]]:
|
|
218
295
|
"""
|
|
219
|
-
An array of repository
|
|
296
|
+
An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
220
297
|
"""
|
|
221
298
|
return pulumi.get(self, "selected_repository_ids")
|
|
222
299
|
|
|
@@ -228,7 +305,7 @@ class _ActionsOrganizationSecretState:
|
|
|
228
305
|
@pulumi.getter(name="updatedAt")
|
|
229
306
|
def updated_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
230
307
|
"""
|
|
231
|
-
Date
|
|
308
|
+
Date the secret was last updated by the provider.
|
|
232
309
|
"""
|
|
233
310
|
return pulumi.get(self, "updated_at")
|
|
234
311
|
|
|
@@ -240,8 +317,7 @@ class _ActionsOrganizationSecretState:
|
|
|
240
317
|
@pulumi.getter
|
|
241
318
|
def visibility(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
242
319
|
"""
|
|
243
|
-
Configures the access that repositories have to the organization secret
|
|
244
|
-
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
320
|
+
Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
245
321
|
"""
|
|
246
322
|
return pulumi.get(self, "visibility")
|
|
247
323
|
|
|
@@ -258,32 +334,34 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
258
334
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
259
335
|
destroy_on_drift: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
260
336
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
337
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
261
338
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
262
339
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
263
340
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
264
341
|
visibility: Optional[pulumi.Input[_builtins.str]] = None,
|
|
265
342
|
__props__=None):
|
|
266
343
|
"""
|
|
267
|
-
## Example Usage
|
|
268
|
-
|
|
269
344
|
## Import
|
|
270
345
|
|
|
271
|
-
|
|
346
|
+
### Import Command
|
|
347
|
+
|
|
348
|
+
The following command imports a GitHub actions organization secret named `mysecret` to a `github_actions_organization_secret` resource named `example`.
|
|
272
349
|
|
|
273
350
|
```sh
|
|
274
|
-
$ pulumi import github:index/actionsOrganizationSecret:ActionsOrganizationSecret
|
|
351
|
+
$ pulumi import github:index/actionsOrganizationSecret:ActionsOrganizationSecret example mysecret
|
|
275
352
|
```
|
|
276
|
-
NOTE: the implementation is limited in that it won't fetch the value of the
|
|
277
|
-
`plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
278
353
|
|
|
279
354
|
:param str resource_name: The name of the resource.
|
|
280
355
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
356
|
+
:param pulumi.Input[_builtins.bool] destroy_on_drift: (Optional) This is ignored as drift detection is built into the resource.
|
|
357
|
+
|
|
358
|
+
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
281
359
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
282
|
-
:param pulumi.Input[_builtins.str]
|
|
283
|
-
:param pulumi.Input[_builtins.str]
|
|
284
|
-
:param pulumi.Input[
|
|
285
|
-
:param pulumi.Input[_builtins.
|
|
286
|
-
|
|
360
|
+
:param pulumi.Input[_builtins.str] key_id: ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
361
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted.
|
|
362
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret.
|
|
363
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
364
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
287
365
|
"""
|
|
288
366
|
...
|
|
289
367
|
@overload
|
|
@@ -292,17 +370,15 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
292
370
|
args: ActionsOrganizationSecretArgs,
|
|
293
371
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
294
372
|
"""
|
|
295
|
-
## Example Usage
|
|
296
|
-
|
|
297
373
|
## Import
|
|
298
374
|
|
|
299
|
-
|
|
375
|
+
### Import Command
|
|
376
|
+
|
|
377
|
+
The following command imports a GitHub actions organization secret named `mysecret` to a `github_actions_organization_secret` resource named `example`.
|
|
300
378
|
|
|
301
379
|
```sh
|
|
302
|
-
$ pulumi import github:index/actionsOrganizationSecret:ActionsOrganizationSecret
|
|
380
|
+
$ pulumi import github:index/actionsOrganizationSecret:ActionsOrganizationSecret example mysecret
|
|
303
381
|
```
|
|
304
|
-
NOTE: the implementation is limited in that it won't fetch the value of the
|
|
305
|
-
`plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
306
382
|
|
|
307
383
|
:param str resource_name: The name of the resource.
|
|
308
384
|
:param ActionsOrganizationSecretArgs args: The arguments to use to populate this resource's properties.
|
|
@@ -321,6 +397,7 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
321
397
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
322
398
|
destroy_on_drift: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
323
399
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
400
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
324
401
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
325
402
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
326
403
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
@@ -336,6 +413,7 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
336
413
|
|
|
337
414
|
__props__.__dict__["destroy_on_drift"] = destroy_on_drift
|
|
338
415
|
__props__.__dict__["encrypted_value"] = None if encrypted_value is None else pulumi.Output.secret(encrypted_value)
|
|
416
|
+
__props__.__dict__["key_id"] = key_id
|
|
339
417
|
__props__.__dict__["plaintext_value"] = None if plaintext_value is None else pulumi.Output.secret(plaintext_value)
|
|
340
418
|
if secret_name is None and not opts.urn:
|
|
341
419
|
raise TypeError("Missing required property 'secret_name'")
|
|
@@ -345,6 +423,7 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
345
423
|
raise TypeError("Missing required property 'visibility'")
|
|
346
424
|
__props__.__dict__["visibility"] = visibility
|
|
347
425
|
__props__.__dict__["created_at"] = None
|
|
426
|
+
__props__.__dict__["remote_updated_at"] = None
|
|
348
427
|
__props__.__dict__["updated_at"] = None
|
|
349
428
|
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["encryptedValue", "plaintextValue"])
|
|
350
429
|
opts = pulumi.ResourceOptions.merge(opts, secret_opts)
|
|
@@ -361,7 +440,9 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
361
440
|
created_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
362
441
|
destroy_on_drift: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
363
442
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
443
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
364
444
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
445
|
+
remote_updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
365
446
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
366
447
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
367
448
|
updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
@@ -373,14 +454,18 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
373
454
|
:param str resource_name: The unique name of the resulting resource.
|
|
374
455
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
375
456
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
376
|
-
:param pulumi.Input[_builtins.str] created_at: Date
|
|
457
|
+
:param pulumi.Input[_builtins.str] created_at: Date the secret was created.
|
|
458
|
+
:param pulumi.Input[_builtins.bool] destroy_on_drift: (Optional) This is ignored as drift detection is built into the resource.
|
|
459
|
+
|
|
460
|
+
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
377
461
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
378
|
-
:param pulumi.Input[_builtins.str]
|
|
379
|
-
:param pulumi.Input[_builtins.str]
|
|
380
|
-
:param pulumi.Input[
|
|
381
|
-
:param pulumi.Input[_builtins.str]
|
|
382
|
-
:param pulumi.Input[_builtins.
|
|
383
|
-
|
|
462
|
+
:param pulumi.Input[_builtins.str] key_id: ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
463
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted.
|
|
464
|
+
:param pulumi.Input[_builtins.str] remote_updated_at: Date the secret was last updated in GitHub.
|
|
465
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret.
|
|
466
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
467
|
+
:param pulumi.Input[_builtins.str] updated_at: Date the secret was last updated by the provider.
|
|
468
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
384
469
|
"""
|
|
385
470
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
386
471
|
|
|
@@ -389,7 +474,9 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
389
474
|
__props__.__dict__["created_at"] = created_at
|
|
390
475
|
__props__.__dict__["destroy_on_drift"] = destroy_on_drift
|
|
391
476
|
__props__.__dict__["encrypted_value"] = encrypted_value
|
|
477
|
+
__props__.__dict__["key_id"] = key_id
|
|
392
478
|
__props__.__dict__["plaintext_value"] = plaintext_value
|
|
479
|
+
__props__.__dict__["remote_updated_at"] = remote_updated_at
|
|
393
480
|
__props__.__dict__["secret_name"] = secret_name
|
|
394
481
|
__props__.__dict__["selected_repository_ids"] = selected_repository_ids
|
|
395
482
|
__props__.__dict__["updated_at"] = updated_at
|
|
@@ -400,13 +487,19 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
400
487
|
@pulumi.getter(name="createdAt")
|
|
401
488
|
def created_at(self) -> pulumi.Output[_builtins.str]:
|
|
402
489
|
"""
|
|
403
|
-
Date
|
|
490
|
+
Date the secret was created.
|
|
404
491
|
"""
|
|
405
492
|
return pulumi.get(self, "created_at")
|
|
406
493
|
|
|
407
494
|
@_builtins.property
|
|
408
495
|
@pulumi.getter(name="destroyOnDrift")
|
|
496
|
+
@_utilities.deprecated("""This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""")
|
|
409
497
|
def destroy_on_drift(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
498
|
+
"""
|
|
499
|
+
(Optional) This is ignored as drift detection is built into the resource.
|
|
500
|
+
|
|
501
|
+
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
502
|
+
"""
|
|
410
503
|
return pulumi.get(self, "destroy_on_drift")
|
|
411
504
|
|
|
412
505
|
@_builtins.property
|
|
@@ -417,27 +510,44 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
417
510
|
"""
|
|
418
511
|
return pulumi.get(self, "encrypted_value")
|
|
419
512
|
|
|
513
|
+
@_builtins.property
|
|
514
|
+
@pulumi.getter(name="keyId")
|
|
515
|
+
def key_id(self) -> pulumi.Output[_builtins.str]:
|
|
516
|
+
"""
|
|
517
|
+
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
518
|
+
"""
|
|
519
|
+
return pulumi.get(self, "key_id")
|
|
520
|
+
|
|
420
521
|
@_builtins.property
|
|
421
522
|
@pulumi.getter(name="plaintextValue")
|
|
422
523
|
def plaintext_value(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
423
524
|
"""
|
|
424
|
-
Plaintext value of the secret to be encrypted
|
|
525
|
+
Plaintext value of the secret to be encrypted.
|
|
425
526
|
"""
|
|
426
527
|
return pulumi.get(self, "plaintext_value")
|
|
427
528
|
|
|
529
|
+
@_builtins.property
|
|
530
|
+
@pulumi.getter(name="remoteUpdatedAt")
|
|
531
|
+
def remote_updated_at(self) -> pulumi.Output[_builtins.str]:
|
|
532
|
+
"""
|
|
533
|
+
Date the secret was last updated in GitHub.
|
|
534
|
+
"""
|
|
535
|
+
return pulumi.get(self, "remote_updated_at")
|
|
536
|
+
|
|
428
537
|
@_builtins.property
|
|
429
538
|
@pulumi.getter(name="secretName")
|
|
430
539
|
def secret_name(self) -> pulumi.Output[_builtins.str]:
|
|
431
540
|
"""
|
|
432
|
-
Name of the secret
|
|
541
|
+
Name of the secret.
|
|
433
542
|
"""
|
|
434
543
|
return pulumi.get(self, "secret_name")
|
|
435
544
|
|
|
436
545
|
@_builtins.property
|
|
437
546
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
547
|
+
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
438
548
|
def selected_repository_ids(self) -> pulumi.Output[Optional[Sequence[_builtins.int]]]:
|
|
439
549
|
"""
|
|
440
|
-
An array of repository
|
|
550
|
+
An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
441
551
|
"""
|
|
442
552
|
return pulumi.get(self, "selected_repository_ids")
|
|
443
553
|
|
|
@@ -445,7 +555,7 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
445
555
|
@pulumi.getter(name="updatedAt")
|
|
446
556
|
def updated_at(self) -> pulumi.Output[_builtins.str]:
|
|
447
557
|
"""
|
|
448
|
-
Date
|
|
558
|
+
Date the secret was last updated by the provider.
|
|
449
559
|
"""
|
|
450
560
|
return pulumi.get(self, "updated_at")
|
|
451
561
|
|
|
@@ -453,8 +563,7 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
453
563
|
@pulumi.getter
|
|
454
564
|
def visibility(self) -> pulumi.Output[_builtins.str]:
|
|
455
565
|
"""
|
|
456
|
-
Configures the access that repositories have to the organization secret
|
|
457
|
-
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
566
|
+
Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
458
567
|
"""
|
|
459
568
|
return pulumi.get(self, "visibility")
|
|
460
569
|
|